ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
2fcfe56a30
refactor(firewall): queue rule operations and simplify synchronization ( #13784 )
2026-09-10 23:54:46 +08:00
ssongliu
4cd77d8ee1
fix(firewall): simplify rule editing and reject duplicate adoption ( #13779 )
2026-09-10 18:11:36 +08:00
ssongliu
6bc9dd96af
fix: simplify firewall rule editing and dual-stack port handling ( #13748 )
2026-09-08 22:46:35 +08:00
ssongliu
a71aea8aec
fix(firewall): hide inactive Docker ports ( #13716 )
2026-09-04 21:43:05 +08:00
ssongliu
7be7368bb9
fix: improve firewall lifecycle recovery ( #13686 )
2026-09-02 14:48:59 +08:00
ssongliu
fb377d2e99
fix(firewall): recover rules after upgrade ( #13680 )
2026-09-01 14:53:01 +08:00
ssongliu
deddd392ba
fix(firewall): handle Docker host input ports ( #13675 )
2026-09-01 09:33:29 +08:00
ssongliu
3ab10848c8
fix: restore firewall-dependent rules after reset ( #13674 )
2026-08-31 17:15:56 +08:00
ssongliu
433f1a940f
fix: improve firewall abnormal state diagnostics ( #13673 )
2026-08-31 16:18:13 +08:00
ssongliu
1f12c09eb5
fix: improve firewall rule management ( #13670 )
2026-08-31 11:48:14 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
18428d108e
feat: improve firewall backend synchronization ( #13644 )
2026-08-27 10:31:39 +08:00
ssongliu
12f2484d12
feat: support firewall rule synchronization ( #13637 )
2026-08-25 18:50:27 +08:00
ssongliu
86af4fbd4d
feat: improve firewall status and UI translations ( #13630 )
2026-08-24 17:40:36 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
8fb3e78554
chore: Fix some internationalization content ( #11528 )
...
Refs #11517
2025-12-31 14:35:38 +00:00
ssongliu
402931862f
fix: Fix the issue where iptables description does not take effect ( #10947 )
2025-11-13 08:36:47 +00:00
ssongliu
102f7c316d
fix: display iptables default allowed ports ( #10922 )
2025-11-11 14:22:42 +00:00
ssongliu
6db79f4b7b
feat: support iptables firewall control ( #10903 )
2025-11-10 21:17:53 +08:00
双向极端 and live
d0bb9165bf
feat: Add inbound interface restriction option for ufw forward rules ( #10345 ) ( #10549 )
...
* 修复https防窜站关闭时修改默认站点报错的问题
* feat: Add inbound interface restriction option for ufw forward rules (#10345 )
---------
Co-authored-by: live <Anxys@outlook.com >
2025-10-02 20:33:20 +08:00
ssongliu
ea25b800d2
fix: Add Docker restart option to firewall operations ( #10253 )
...
Refs #10247
2025-09-03 09:29:30 +00:00
ssongliu
47d8c405dd
fix: Merge dev code up to pr #8141 ( #8147 )
2025-03-14 10:08:31 +08:00
ssongliu
55a6cdcf10
feat: uniform application service status return ( #7426 )
2024-12-18 10:06:15 +00:00
ssongliu
8d28b7db94
pref: backend 重命名 agent
2024-07-23 14:48:37 +08:00
ssongliu
HynoR
ssongliu
双向极端andlive
ssongliu